IG
Product
Ignite
On CISA KEVExploited in the wildRansomware-linked
9
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 1Medium 2Low 1
Watch
Add Ignite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1273 RansomwareIn wildKEV | 9.8 | Apr 11 | Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of… Affected: 1.0.1 through 2.5.0; 1.0.0; 1.0.0 |
| CVE-2018-8018 | 9.8 | Jul 20 | In Apache Ignite before 2.4.8 and 2.5.x before 2.5.3, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it… Affected: before 2.4.8; after 2.5.0 before 2.5.3 |
| CVE-2018-1295 | 9.8 | Apr 2 | In Apache Ignite 2.3 or earlier, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it possible to run arbitrary… Affected: through 2.3.0 |
| CVE-2020-1963 | 9.1 | Jun 3 | Apache Ignite uses H2 database to build SQL distributed execution engine Affected: through 2.8.0 |
| CVE-2024-52577 | 9.0 | Feb 14 | In Apache Ignite versions from 2.6.0 and before 2.17.0, configured Class Serialization Filters are ignored for some Ignite endpoints Affected: 2.6.0 before 2.17.0 |
| CVE-2017-7686 | 7.5 | Jun 28 | Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users about new project releases that include additional functionality, bug fixes and performance… Affected: 1.0.0; 1.0.0; 1.1.0; 1.2.0; 1.3.0; 1.4.0; +7 more |
| CVE-2025-48977 | 6.5 | May 28 | Apache Ignite: REST HTTP arbitrary file read vulnerability Affected: 2.0.0 before 2.18.0 |
| CVE-2016-6805 | 5.9 | Apr 7 | Apache Ignite before 1.9 allows man-in-the-middle attackers to read arbitrary files via XXE in modified update-notifier documents Affected: through 1.8 |
| CVE-2021-28163 | 2.7 | Apr 1 | In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory… Affected: before 2.1.1 |
Showing 9